<font color=skyblue>My notepad.exe is no longer on my PC.

Can anyone explain that one?

Maybe this??? http://www.pchell.com/virus/qaz.shtml

</font>

[ 06-28-2004, 08:36 PM: Message edited by: Larry_OHF ]

i hate manual removal.. just wanna say good luck.. i must say larry, what websites do you go to? i remember you having 6 spyware programs and bunch of anti-virus links and its still not enough for ya. [img]tongue.gif[/img]

Just remember to turn off the auto-recovery in case the trojan got itself inside there too.

well, my notepad.exe disappeared too, I just got a friend to send me another copy.

<font color=skyblue>No virus was found and if I type in notepad on the run command, I can access it, but if I do a search for notepad or any .exe that has notepad name...it is not there.

Weird, eh?</font>

Notepad.exe should be right in your C:WINDOWS folder. If it's not there, I can send you my copy, if you like.

not weird, it has been misplaced ;) try running it, and seeing if you can find where it is located now, worse comes to worse, just have someone send you a new one, and place it in the program file

maybe it is an xp error. It happened to me to and I didn't get a virus at the time. Just get someone to send you another copy, il give you a copy of mine, or you can get Arledrians etc.

edit: Maybe the .exe file extension has been renamed to something else, which would make it unrecognizable.

[ 06-28-2004, 05:13 PM: Message edited by: RoSs_bg2_rox ]

Weird. Perhaps you've flipped a switch in Windows that tells it to ignore certain file types when you do a search.

As long as it's there, you should be fine. But I'd be looking for what other strangeness may appear....

<font color=skyblue>Ok, that got me to it, though I am surprised to have found it. I did a search and could not. Also, I was mistakenly looking in system and system32 folders for this.

So, what has happened is that the shortcuts no longer take me to the .exe, so I have to go back through and redirect it to the right place.

Thanks. That was a wierd glitch.</font>

<font color=skyblue>Aha!

I found out what was wrong! The link for notepad was directed to an .exe in the sys32 folder called "actmovie", by Microsoft.

What do you think of this? http://www.opencard.org/archive/opencard/2694.html

and these... http://www.pestpatrol.com/pestinfo/b...hoenix_162.asp

http://research.pestpatrol.com/Searc...e9ce844b764d89

</font>

[ 06-28-2004, 08:27 PM: Message edited by: Larry_OHF ]

<font color=skyblue>I don't know what to do. This website tells me to delete the following:
actmovie.exe
important.readme.txt
license.txt
phclient.exe
servermaker.exe

When I look at actmove.exe, it says that it is copywrite Microsoft, so this is something that I should not delete, right?</font>

Larry,

I found this link at Spyware Info about someone else losing notepad. You're not alone...

It looks like actmovie.exe is a legit Windows file, and it's being overwritten. I would suggest replacing it and the other files with legit versions, possibly doing a Windows repair installation.

The above link also contains a link to a page at spywareinfo that offers good copies of the files for downloading, along with instructions on where (and how) to put them.

In short, what you've got looks like it's bad stuff, and nuking it is your best option [img]smile.gif[/img]

Thanks!